ClawHub

Dream Image to Video

v1.0.1

Generate videos from images using Image to Video (Wan2.1) API. Automatically generates 4-second videos from text descriptions and images. Powered by Dreamfac...

⭐ 0· 439·1 current·1 all-time
byhy@hy-1990
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared requirement (DREAMIMAGETOVIDEO_API_KEY) and the SKILL.md describes calls to api.newportai.com image-to-video endpoints. No unrelated credentials, binaries, or install steps are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to call NewportAI endpoints, obtain upload policies for local file uploads, and poll for async results. This is within the expected scope for an image→video API. Note: uploading local files and the openclaw config patch will transmit data (images/prompts and the API key) to external services—expected for this kind of skill but important for privacy.
✓
Install Mechanism
No install spec and no code files are included (instruction-only). That minimizes local code execution risk; nothing is downloaded or written by the skill itself.
✓
Credentials
Only one required env var (DREAMIMAGETOVIDEO_API_KEY) is declared and used as the primary credential, which is proportionate for an external API integration. The SKILL.md does not reference other secrets or system config paths.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated platform privileges. The SKILL.md shows a recommended openclaw config patch to store the API key in agent config — expected but the user should verify config storage/access controls.
Assessment
This skill is coherent with its stated purpose, but it will transmit your images, prompts, and the API key to a third-party endpoint (api.newportai.com / tools.dreamfaceapp.com). Before installing: 1) Verify you trust NewportAI/Dreamface and review their privacy/billing policies. 2) Use a dedicated, limited-scope API key (rotate/revoke if needed). 3) Be cautious about uploading sensitive images or PII. 4) Understand that running the suggested openclaw config patch stores the API key in your agent configuration—confirm who can access that config. If you need stronger guarantees, test with non-sensitive data and confirm the endpoint/domain are legitimate.

Like a lobster shell, security has layers — review code before you run it.

latestvk976p7mt4xmr2sps3tq63vjqg982kj1r

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvDREAMIMAGETOVIDEO_API_KEY
Primary envDREAMIMAGETOVIDEO_API_KEY

Comments